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ABSTRACT OF THE DISCLOSURE 

A method and apparatus for collecting and securely transmitting 
biometric data over a network contains a sensor, preferably a camera, for collecting 
5 biometric data and code generating hardware and software. The camera data is digitized 
and a unique code which is a function of the digitized camera data, a secret key and a 
transaction token is attached to the digital file. The code may identify the sensor which 
C acquired the biometric information, a time at which die biometric information was 
y acquired, or a time interval during which the data is considered to be valid, and a 
W unique transaction code. The data and code are transmitted over a network to a server 
d which authenticates that the data has not been altered by recomputing the code using its 
own knowledge of the secret key and transaction token needed to generate the code. If 
iz; the data is authentic the server then computes a biometric tenq)late using the data. This 
y biometric template is then compared to a previously defined biometric template to 
5^ identify the user and give die user access to a secured resource. Components to 
^ generate the biometric template may be included in the unaging device. A mutual 

authentication system may verify that both the server and the client are authentic. The 
system can be used for online banking and Internet commerce transactions. 


